Found a gadget where X-Forwarded-For was blocked, but x-forwarded-for was allowed.
Tools like ffuf actually auto-capitalize headers so you would easily miss this without manually testing!
Sign up to get updates from us
Found a gadget where X-Forwarded-For was blocked, but x-forwarded-for was allowed.
Tools like ffuf actually auto-capitalize headers so you would easily miss this without manually testing!
